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DETAILED ACTION 



Response to Amendment 
This office action is in response to arguments filed on June 28, 2004. Original 
application contained Claims 1-28. Applicant amended Claim 1, 21-23, 25, 27 and 28. The 
amendment filed have been entered and made of record. Presently pending claims are 1-28. 

Information Disclosure Statement 
The information disclosure statement filed February 3, 2004 fails to comply with 37 CFR 
1.98(a)(1), which requires a list of all patents, publications, or other information submitted for 
consideration by the Office. Examiner requests a signed copy of PTO-1449 for consideration. 

Response to Arguments 
1. Regarding Claim rejection, examiner intended to reject claims 1-28 under subsection (b) 
of Section 102. Examiner acknowledges typing error as mentioned and informed to applicant 
during a phone inquiry by the applicant after receiving last non-final office action from 
examiner. 

Applicant's arguments filed on June 28, 2004 have been fully considered but they are not 
persuasive because of the following reasons: 
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Regarding Claims 1, 12, 14, 17, 21-23, 25, 27, and 28 applicants argued that the cited 
admitted prior art (CPA) [Chaum et al.] does not teach, " a system reproducing the individual 
user-end equipment secret information from the received individual user-end equipment 
information as set forth in claim", and does not suggest "the user-end equipment and the 
system-end equipment executing a cryptographic communication with each other using 
individual user-end equipment secret information and also does not teach "specifically 
defined electronic toll collection authentication system and method set forth in independent 
claims" 

This is not found persuasive. CPA clearly teaches system and method that is installed within a 
multi-lane toll plaza environment and has roadside collection stations (RCS) each of which 
communicates over a high speed short-range microwave or RF communication link with in 
vehicle units ( IVU's). Each in- vehicle unit comprises an RF antenna having a pattern adapted 
for disposition in proximity to an associated vehicle and for communicating with a RSC while 
moving past it. RF circuits are connected to the antenna for operating in either a mode in which 
a data uplink is established with an RCS by modulating the reflectivity of the antenna or a mode 
in which a data downlink is established with an RCS by demodulating received RF signals. 
The IVU also includes a smart card controller removably connected with a smart card, and a link 
controller connected to the RF circuits and to the smart card controller. The link controller 
includes circuits for causing operation in the first mode to repetitively transmit first data to an 
RCS and in the second mode to receive second data , based at least in part on the first data, upon 
which operation is switched back to the first mode for transmission of third data based at least in 
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part on the second data, the first and third data together collectively comprising a 
crvptographically secured electronic money transfer. 

As a result, CPA does implement and teaches a system and method that provides an ETC 
authentication system and a method of the authentication, in which roadside equipment and 
central processing equipment are capable of making a direct authentication for legitimacy of an 
IC card(Fig.l-2, and 4-5). 

5 . Applicants clearly have failed to explicitly identify specific claim limitations , which 
would define a patentable distinction over prior arts. Examiner is not trying to teach the 
invention but is merely trying to interpret the claim language in its broadest and reasonable 
meaning. The examiner will not interpret to read narrowly the claim language to read exactly 
from the specification, but will interpret the claim language in the broadest reasonable 
interpretation in view of the specification. Therefore, the examiner asserts that APA does teach 
or suggest the subject matter broadly recited in independent and dependent 

Claim Rejections - 35 USC § 102 
1. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 



Application/Control Number: 09/432,007 
Art Unit: 2131 

2. Claims 1-28 are rejected under 35 U.S.C. 
S. Patent (5,485,520). 



Page 5 



102(e) as being anticipated by Chaum et al. U. 



3. Regarding Claim 1 Chaum teaches and describes an equipment authentication and 
cryptographic communication system, comprising: user-end equipment, system-end equipment, 
and a key center for administrating authentication of equipment in said system (Fig.l), wherein; 

- said user-end equipment provided with individual user-end equipment information 
issued by said key center and individual user-end equipment secret information corresponding to 
said individual user-end equipment's information, and said user-end equipment transmits said 
individual user-end equipment information to said system-end equipment (col.6 line 65 to col.7 
line 65); 

- said system-end equipment receives said individual user-end equipment information 
from said user-end equipment, reproduces said individual user-end equipment secret information 
from said received individual user-end equipment information, and authenticates said user-end 
equipment by confirming that said user-end equipment legitimately has said individual user-end 
equipment secret information by using a challenge response utilizing a common key 
cryptographic algorithm (col.7 line 38 to col.8 line 25); and 

- said user-end equipment and said system-end equipment execute a cryptographic 
communication with each other using said individual user-end equipment secret information 
(col.9 line 36 to line 48). 
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4. Regarding Claim 12 Chaum teaches and describes an equipment authentication and 
cryptographic communication system, comprising: user-end equipment, system-end equipment, 
and a key center for administrating authentication of equipment in said system, wherein; 

- said key center is provided with a first system converter for generating user-end 
equipment secret information from user-end equipment information (col.6 line 65 to col.7 line 

7); 

- said user-end equipment is provided with a first storage unit for storing said user-end 
equipment information provided by said key center, a second storage unit for storing said 
user-end equipment secret information, a first encryption unit, and a first decryption unit (col.7 
line 37 to col.8 line 5, and col. 10 line 66 to col.l 1 line 25); and 

- said system-end equipment is provided with a second system converter for generating 
said user-end equipment secret information by a system conversion of said user-end equipment 
information received from said user-end equipment, a second encryption unit, and a second 
decryption unit, and wherein said user-end equipment and said system-end equipment share and 
utilize said user-end equipment secret information as a common key for encryption and 
decryption in said first encryption unit and said first decryption unit in said user-end equipment, 
and said second encryption unit and said second decryption unit in said system-end equipment 
(col.9 line 25 to line 48). 

5. Regarding Claim 14 Chaum teaches and describes a method of equipment authentication 
and cryptographic communication for an equipment authentication and cryptographic 
communication system including user-end equipment, system-end equipment, and a key center 
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for administrating authentication of equipment in said system, said method comprising the steps 
of: 

- generating user-end equipment secret information from user-end equipment information 
in said key center (col.6 line 65 to col.7 line 7); 

- receiving said user-end equipment information and said user-end equipment secret 
information in said user-end equipment from said key center (col.7 line 37 to col.8 line 5); 

- receiving said user-end equipment information from said user-end equipment, and 
generating said user-end equipment secret information from said user-end equipment information 
received in said system-end equipment, and using said user-end equipment secret information as 
a common key for encryption and decryption in both of said user-end equipment and said 
system-end equipment (col.9 line 25 to line 48, and col 10 line 66 to col.l 1 line 25). 

6. Regarding Claim 17 Chaum teaches and describes a cryptographic communication 
system comprising: an IC card, authentication equipment for authenticating said IC card, and 
intermediary equipment between said IC card and said authentication equipment, wherein; 

- said IC card includes a first storage unit for storing a secret key particular to said IC 
card, a second storage unit for storing a certificate of individual IC card key data for generating 
said secret key, a third storage unit for storing an IC card ID data, and an encryption unit for 
generating an encrypted data representing response data by encrypting challenge data received 
from said authentication equipment using said secret key (col.3 line 10 to line 45, col. 5 line 54 to 
col.6 line 19, and col.7 line 37 to line 65); and 
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- said authentication equipment includes a means for producing said secret key particular 
to said IC card from said certificate of individual IC card key data received, a first decryption 
unit for reproducing said response data by decrypting said encrypted data received from said IC 
card using said produced secret key, and a first matching determination unit for determining if 
reproduced response data matches said challenge data transmitted by said authentication 
equipment (col. 5 line 54 to col.6 line 19, and col.8 line 36 to col.54). 

7. Regarding Claim 21 Chaum teaches and describes an electronic toll collection ("ETC") 
authentication system including an IC card, roadside equipment, and central processing 
equipment, comprising: 

- said IC card including an encryption means for receiving a challenge data generated by 
roadside equipment, as said IC card passes said roadside equipment, and for encrypting said 
challenge data using a secret key, an encrypted data storage means for storing data encrypted by 
said encryption means, a response data transmission means for transmitting IC card ID data and a 
certificate of individual IC card key data, together with said encrypted data stored in said 
encrypted data storage means, as response data to said roadside equipment (col.3 line 10 to line 
45, col.5 line 54 to col.6 line 19, and col.7 line 37 to line 65); 

- said roadside equipment including a dividing means for dividing said transmitted 
response data, a second decryption means for decrypting said certificate of individual IC card 
key data divided by said dividing means, using a validation key; a first matching determination 
means for making a matching determination of said IC card ID produced as a result of decryption 
with another IC card ID provided by said dividing means; a first decryption means for producing 
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response data by decrypting an encrypted data provided by said dividing means; and a challenge 
data transmission means for transmitting said challenge data to said IC card (col. 5 line 54 to 
col.6 line 19, and col.8 line 36 to col.54) ; and 

- said central processing equipment including challenge data storage means for storing 
said challenge data generated by said roadside equipment; and a second matching determination 
means for receiving said response data decrypted by said first decryption means, and executing a 
matching determination of said response data with said challenge data stored in said challenge 
data storage means, said ETC authentication system providing authentication of said IC card ID 
by said roadside equipment by authenticating said certificate of individual IC card key data 
received with said IC card ID, and said central processing equipment providing a matching 
determination of said response data encrypted by said IC card and decrypted by said roadside 
equipment to said challenge data (col.3 line 10 to line 45, and col.7 line 37 to line 65). 

8. Regarding Claim 22 Chaum teaches and describes an electronic toll collection ("ETC") 
authentication method comprising the steps of: 

- encrypting challenge data using a secret key in an IC card, said challenge data being 1 
generated by roadside equipment and transmitted to said IC card when said IC card passes by 
said roadside equipment, storing said encrypted data, transmitting an IC card ID data and a 
certificate of individual IC card key data, in addition to said stored encrypted data, as response 
data to said roadside equipment (col.3 line 10 to line 45, col.5 line 54 to col.6 line 19, and col.7 
line 37 to line 65); 
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- dividing said response data received by said roadside equipment, decrypting said 
certificate of individual IC card key data, provided by the dividing step, using a validation key, 
carrying out a matching determination of an IC card ID provided in the decrypting step with 
another IC card ED provided in the dividing step, providing a response data by decrypting said 
encrypted data provided in the dividing step (col. 5 line 54 to col.6 line 19, and col.8 line 36 to 
col.54); and 

- carrying out in said central processing equipment a matching determination of said 
response data decrypted by said roadside equipment with said challenge data, said ETC , 
authentication method providing authentication of said IC card ID by said roadside equipment by 
authenticating said certificate of individual IC card key data received with said IC card ID, and 
said central processing equipment providing a matching determination of said response data 
encrypted by said IC card and decrypted by said roadside equipment (col.3 line 10 to line 45, and 
col.7 line 37 to line 65). 

9. Regarding Claim 23 Chaum teaches and describes an electronic toll collection ("ETC") 
authentication system comprising: 

- first roadside equipment including challenge data and time generator I storage means 
for generating and storing challenge data and time information, and transmitting said challenge 1 
data and time information to an IC card, said IC card including an ID transmission means for 
transmitting an IC card ID before said IC card passes said first roadside equipment; an 
encryption means for receiving said challenge data and said time information generated by said 
first roadside equipment, as said IC card passes said first roadside equipment, and encrypting 
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received data using a secret key; a response data transmission means for transmitting an IC card 
ID data and a certificate of individual IC card key data, together with said encrypted data as a 
response data to a second roadside equipment (col.3 line 10 to line 45, col.5 line 54 to col.6 line 
19, and col.7 line 37 to line 65); 

- said second roadside equipment including a first dividing means for dividing said 
response data, a second decryption means for decrypting said certificate of individual IC card 
key data divided by said first dividing means, using a validation key, a first matching 
determination means for providing a matching determination of an IC card ID produced as a 
result of decryption with another IC card ID provided by said first dividing means; and a first 
decryption means for producing a response data by decrypting an encrypted data obtained from 
said first dividing means (col. 5 line 54 to col.6 line 19, and col.8 line 36 to col.54); and 

- central processing equipment including a second dividing means for dividing said 
challenge data and said IC card ID generated by said first roadside equipment; a third dividing 
means for dividing said response data and said IC card ID decrypted by said second roadside 
equipment; and a second matching determination means for making a matching determination of 
said challenge data obtained by said second dividing means and said response data provided by 
said third dividing means, said ETC authentication system providing authentication of said IC 
card ID by said second roadside equipment by authenticating said certificate of individual IC 
card key data received with said IC card ID, and said central processing equipment providing the 
matching determination of said response data encrypted by said IC card and decrypted by said < 
second roadside equipment (col.3 line 10 to line 45, and col.7 line 37 to line 65). 
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10. Regarding Claim 25 Chaum teaches and describes an electronic toll collection ("ETC") 
authentication method comprising the steps of: 

- receiving a card ID from an IC card before said IC card passes first roadside 
equipment, encrypting challenge data and time information using a secret key, said challenge 
data and tune information being generated by first roadside equipment and transmitted to said IC 
card when said IC card passes said first roadside equipment, transmitting IC card ID data and a 
certificate of individual IC card key data, in addition to said encrypted data, as a response data to 
second roadside equipment (col.3 line 10 to line 45, col.5 line 54 to col.6 line 19, and col.7 line 
37 to line 65); 

- dividing said transmitted response data in said second roadside equipment, decrypting 
said certificate of individual IC card key data provided in the dividing step using a validation 
key, carrying out a matching determination of an IC card ID provided in the decryption step with 
another IC card ID provided in the dividing step, providing a response data by decrypting said 
encrypted data provided in the dividing step (col. 5 line 54 to col.6 line 19, and col.8 line 36 to 
col.54); 

- carrying out in central processing equipment a matching determination of said 
challenge data provided from said first roadside equipment and said response data decrypted in 
said second roadside equipment, said ETC authentication method providing authentication of 
said IC card ED by said second roadside equipment by authenticating said certificate of 
individual IC card key data received with said IC card ID, and said central processing equipment 
providing the matching determination of said response data encrypted by said IC card and 
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decrypted by said second roadside equipment (col.3 line 10 to line 45, and col.7 line 37 to line 
65). 



1 1 . Regarding Claim 27 Chaum teaches and describes an electronic toll collection ("ETC") 
authentication system comprising: 

- a first roadside equipment including a challenge data generation means for generating a 
challenge data, and transmitting said challenge data to an IC card, said IC card including an ED 
transmission means for transmitting an IC card ID before said IC card passes said first roadside 
equipment, an encryption means for receiving said challenge data generated by said first roadside 
equipment, as said IC card passes said first roadside equipment, and encrypting said challenge 
data using a secret key; and a response data transmission means for transmitting an IC card ID 
data and a certificate of individual IC card key data, together with said encrypted data as 
response data to second roadside equipment (col.3 line 10 to line 45, col.5 line 54 to col.6 line 
19, and col.7 line 37 to line 65); 

- said second roadside equipment including a first dividing means for dividing said 
response data; a decryption means for decrypting said certificate of individual IC card key data 
divided by said first dividing means, using a validation key; a first matching determination 
means for providing a matching determination of said IC card ID produced as a result of 
decryption with another IC card ID provided by said first dividing means; and a first decryption 
means for decrypting an encrypted data provided by said first dividing means to obtain response 
data (col. 5 line 54 to col.6 line 19, and col.8 line 36 to col.54); 
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- central processing equipment including a second dividing means for dividing said 
challenge data and said IC card ID generated in said first roadside equipment, a third dividing 
means for dividing said response data decrypted in said second roadside equipment and said IC 
card ID; and a second matching determination means for providing a matching determination of 
said challenge data obtained in said second dividing means and said response data obtained in 
said third dividing means, said ETC authentication system providing authentication of said IC 
card ID by said second roadside equipment by authenticating said certificate of individual IC 
card key data received with said IC card ED, and said central processing equipment providing the 
matching determination of said response data encrypted by said IC card and decrypted by said 
second roadside equipment (col.3 line 10 to line 45, and col.7 line 37 to line 65). 

12. Regarding Claim 28 Chaum teaches and describes an electronic toll collection ("ETC") 
authentication method comprising the steps of: 

- receiving a card ID from an IC card before said IC card passes by first roadside 
equipment, encrypting a challenge data using a secret key, said challenge data being generated 
by said first roadside equipment and transmitted to said IC card when said IC card passes said 
first roadside equipment, transmitting each individual data of said IC card ID and a certificate of 
individual IC card key data, in addition to said challenge data encrypted in the encryption step, as 
response data to second roadside equipment (col.3 line 10 to line 45, col.5 line 54 to col. 6 line 
19, and col.7 line 37 to line 65); 

- dividing said response data transmitted in the transmission step by said second roadside 
equipment, decrypting said certificate of individual IC card key data divided in the dividing step, 
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using a validation key, carrying out a matching determination of said IC card ID produced as a 
result of decryption with another IC card ID provided by the dividing step, producing a response 
data by decrypting said encrypted data provided by the dividing step (col. 5 line 54 to col.6 line 
19, and col.8 line 36 to col.54); and 

- executing in central processing equipment a matching determination of said challenge 
data provided by said first roadside equipment and said response data decrypted by said second 
roadside equipment, said ETC authentication method providing authentication of said IC card ID 
by said second roadside equipment by authenticating said certificate of individual IC card key 
data received said IC card ID, and said central processing equipment providing the matching 1 ' ^ 
determination of said response data encrypted by said IC card and decrypted by said second 
roadside equipment (col.3 line 10 to line 45, and col.7 line 37 to line 65). 

13. Claim 2 is rejected applied as above rejecting Claim 1 . Furthermore, Chaum teaches and 
describes equipment authentication and cryptographic communication system wherein: 

said system-end equipment is provided with system-end equipment secret information, 
which is identical to that possessed by said key center, and produces individual user-end 
equipment secret information from said individual user-end equipment information using said 
system-end equipment secret information; and said user-end equipment authenticates said 
system-end equipment by confirming that said system-end equipment has said individual 
user-end equipment secret information by a challenge response utilizing said common key 
cryptographic algorithm (col. 15 line 65 to col. 16 line 65). 
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14. Claim 3 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches anci 
describes equipment authentication and cryptographic communication system wherein: 

- said system-end equipment is provided with a secret-key cryptographic algorithm, and 
reproduces said individual user-end equipment secret information by a system conversion of said 
individual user-end equipment information using a secret key (col. 16 line 14 to col. 16 line 65). 

15. Claim 4 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes equipment authentication and cryptographic communication system, wherein: 

- said system-end equipment and said user-end equipment are both provided with 
common secret information shared there between by exchanging individually held secret 
information (col. 16 line 14 to col. 16 line 65). : ; % 

16. Claim 5 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes equipment authentication and cryptographic communication system wherein: 

- said system-end equipment and said user-end equipment exchange with each other 
individually held secret information, and generate new secret information by combining said 
individually held secret information and said secret information exchanged there between 
according to a predetermined procedure (Col. 15 line 22 to col. 16 line 65). 

17. Claim 6 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes equipment authentication and cryptographic communication system, wherein: ' ' 1 v 
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- said system-end equipment and said user-end equipment use said individual user-end 
equipment secret information for encrypting said new secret information, which is provided by 
combining said information and said exchanged information (col. 16 line 32 to line 52). 

18. Claim 7 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes equipment authentication and cryptographic communication system, wherein 

- said system-end equipment and said user-end equipment individually generate random 
digits, exchange said generated random digits with each other, and share the same secret 
information particular to said system-end equipment and said user-end equipment by combining 
said generated random digits and said exchanged random digits according to a predetermined 
procedure (col.22 line 18 to line 58). 

1 9. Claim 8 is rejected applied as above rejecting Claim 1 . Furthermore, Chaum teaches and . v 
describes equipment authentication and cryptographic communication system, wherein 

- said system-end equipment and said user-end equipment individually generate random 
digits, combine said random digits with their own information particular to each of said 
system-end equipment and said user-end equipment according to a predetermined procedure, 
generate encrypted data by encrypting the combined information using said individual user- end 
equipment secret information, exchange said encrypted data with each other, generate decrypted 
data by decrypting said exchanged encrypted data using said individual user-end equipment's 
secret information, and reproduce each of said mutually exchanged random digits by dividing the 
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combination of said decrypted data according to a predetermined procedure (col.22 line 59 to 
col.24 line 56). 

20. Claim 9 is rejected applied as above rejecting Claim 1 . Furthermore, Chaum teaches and 
describes equipment authentication and cryptographic communication system wherein: 

- said system-end equipment and said user-end equipment individually generate and 
store random digits, exchange said random digits with each other, combine said exchanged 
random digits with said individually generated and stored random digits according to a 
predetermined procedure, generate encrypted data by encrypting said combined information 
using said individual user-end equipment secret information, exchange said encrypted data with 
each other, generate decrypted data by decrypting said exchanged encrypted data using said 
individual user-end equipment secret information, and reproduce each of said mutually 
exchanged random digits by dividing the combination of said decrypted data according to a 
predetermined procedure (col.22 line 18 to col.24 line 56). 

21. Claim 10 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches 
and describes equipment authentication and cryptographic communication system, wherein said 
system-end equipment and said user- end equipment individually execute matching 
determinations by comparing said mutually exchanged random digits, which are produced by 
dividing the combination of said decrypted data according to the predetermined procedure, with 
said individually generated and stored random digits (col.23 line 16 tocol.24 line 65). 
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22. Claim 1 1 is rejected applied as above rejecting Claim 1 . Furthermore, Chaum teaches and 
describes equipment authentication and cryptographic communication system, wherein 

- said system-end equipment and said user-end equipment produce and store the same 
data by combining said exchanged and received random digits and said individually generated 
and stored random digits according to the predetermined procedure, and mutually share said data 
as a common key particular to both said system-end equipment and said user-end equipment, if 
said matching determination produces a positive result (co.23 line 16 to col.24 line 65, and 
col.26 line 37 to line 56). 

23. Claim 13 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes equipment authentication and cryptographic communication system, wherein: 

- said user-end equipment further comprises a first random digit generator for generating 
a random digit, a second random digit generator for generating a random digit, a first combiner 
for combining a pair of random digit data according to a predetermined procedure, a first divider 
for dividing a combined pair of random digit data to reproduce original random digits prior to 
combining, a first common key generator for combining a pair of random digit data according to 
a predetermined procedure, ;and a first matching determination unit for determining if two 
random digit data match each other (col. 16 line 32 to line 52, and col.26 line 37 to line 56); and 

- said system-end equipment further comprises a third random digit generator for 
generating a random digit, a fourth random digit generator for generating another random digit, a 
second combiner for combining a pair of random digit data according to a predetermined 
procedure, a second divider for dividing a combined pair of random digit data to reproduce 
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original random digits prior to combining, a second common key generator for combining a pair 
of random digit data according to a predetermined procedure, and a second matching 
determination unit for determining if two random digit data match each other (col.27 line 18 to 
line 58, and col.26 line 37 to line 56). 

24. Claim 15 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes method of equipment authentication and cryptographic communication further 
comprising the steps of: 

- generating a first random digit in said user-end equipment, and transmitting said first 
random digit to said system-end equipment, generating a second random digit in said system-end 
equipment, combining said second random digit and said first random digit received from said 
user-end equipment, encrypting combined data of said second random digit and said first random 
digit using said common key, and transmitting said encrypted data to said user-end equipment, 
decrypting said encrypted data received in said user-end equipment using said common key, and 
reproducing said first random digit and said second random digit by dividing decrypted data of 
said encrypted data received in said user-end equipment, determining in said user-end equipment 
if said first random digit reproduced in the preceding decryption step matches with another first 
random digit generated therein, generating a third random digit in said user-end equipment, 
combining said third random digit and said second random digit reproduced in the decryption 
step, encrypting combined data of said third random digit and said second random digit using 
said common key, and transmitting encrypted data of said combined data to said system-end 
equipment, generating a fourth random digit in said system-end equipment, and transmitting said 
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fourth random digit to said user-end equipment, and combining said fourth random digit 
received in said user-end equipment from said system-end equipment and said third random digit * ft 
generated therein, encrypting combined data of said fourth random digit and said third random 
digit using said common key, and transmitting encrypted data of said combine data to said 
system-end equipment (col. 16 line 32 to line 52, col.22 line 18 to line 58, col.23 line 16 to col.24 
line 65, and col.26 line 37 to line 56); 

- decrypting said encrypted data received in said system-end equipment using said 
common key, and reproducing said third random digit and said fourth random digit by dividing 
decrypted data of said encrypted data received in said system-end equipment, and determining in 
said system-end equipment if said fourth random digit reproduced in the preceding decryption 
step matches with another fourth random digit generated therein (col.22 line 18 to line 58, and 
col.26 line 37 to line 56). 

25. Claim 16 is rejected applied as above rejecting Claim 1 . Furthermore, Chaum teaches and 
describes a method of equipment authentication and cryptographic communication further 
comprising the steps of: 

- producing data in said system-end equipment for use as a common key for 
cryptographic communication by combining said second random digit generated therein with 
said third random digit reproduced by decryption; and producing data in said user-end equipment 
for use as a common key for cryptographic communication by combining said third random digit 
generated therein and said second random digit reproduced by decryption (col.23 line 16 to 
col.24 to line 65, and col.26 line 37 to line 56). 
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26. Claim 1 8 is rejected applied as above rejecting Claim 1 . Furthermore, Chaum teaches and 
describes a cryptographic communication system according to claim 17 wherein: 

- said IC card further includes a receiver for receiving said challenge data generated by ... ^, 
said authentication equipment and transmitted via said intermediary equipment, and a response 
data transmitter for transmitting said encrypted data representing response data, said IC card ID 
data, and said certificate of individual IC card key data to said authentication equipment via said 
intermediary equipment, and said means for producing said secret key in said authentication 
equipment includes a storage unit for storing a validation key, a second decryption unit for 
producing an IC card ID and a secret key by decrypting said certificate of individual IC card key 
data received from said IC card, using said validation key (col.3 line 10 line 45, col. 5 line 54 to 
col.6 line 19, and col.7 line 37 to line 65); and 

- said authentication equipment further includes a challenge data generator / storage unit 
for generating and storing said challenge data, and a second matching determination unit for " r 1 
determining if said response data decrypted by said first decryption unit matches with said 
challenge data stored in said challenge data generator / storage unit (col.22 line 1 8 to line 58, and 
col.26 line 37 to line 56). 

27. Claim 19 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes a cryptographic communication system wherein: 
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- said IC card further includes a combiner for generating combined data by combining 
said IC card ID data, said certificate of individual IC card key data, and said encrypted data, and 
transmitting said combined data to said authentication equipment (col.3 line 10 to line 45); and 

- said authentication equipment further includes a first divider for dividing said combined 
data received from said IC card into said IC card ID data, said certificate of individual IC card 
key data, and said encrypted data, and a second divider for dividing data decrypted by said . 
second decryption unit into said IC card ID and said secret key (col. 16 line 14 to line 65). 

28. Claim 20 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes a cryptographic communication system wherein: 

- said authentication equipment further includes a first combiner for combining said 
challenge data stored in said challenge data generator / storage unit and said IC card ID data 
produced by said second divider, a third divider for producing said challenge data from data 
combined by said first combiner, a second combiner for combining said response data decrypted 
by said first decryption unit and said IC card ID data produced by said second divider, and a 
fourth divider for producing said response data from data combined by said second combiner - 
(col. 16 line 32 to line 52, and col.26 line 37 to line 56). 

29. Claim 24 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes a ETC authentication system, wherein: 

- said second roadside equipment further comprises another decryption means for 
decrypting said encrypted data provided by said first dividing means, using a secret key 
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reproduced by said second decryption means; and a validation means for providing time 
information, at which said IC card passed said first roadside equipment, from a decrypted result 
of said another decryption means, and for confirming if a difference between said time 
information and present time is within a predetermined time period (col.3 line 10 to line 45, and 
col.26 line 37 to line 65). 

30. Claim 26 is rejected applied as above rejecting Claim 1. Furthermore, Chaum teaches and 
describes a ETC authentication method further comprising the steps of: 

- decrypting said encrypted data provided by the dividing step, using a secret key reproduced in, 
said decryption step; and providing time information, at which said IC card passed said first 
roadside equipment, as a result of the decryption step, and confirming if a difference between 
said time information and present time is within a predetermined time (col.3 line 10 to line 45, 
col.26 line 37 to line 65, and col.12 line 57 to col.13 line 28). claims. Accordingly, rejections for 
claims 1-24 are respectfully. 



Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). ; * \ 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 



Application/Control Number: 09/432,007 



Page 25 



Art Unit: 2131 

will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Syed Zia whose telephone number is 571-272-3798. The 
examiner can normally be reached on Monday - Friday 9:00 AM to 5:00 PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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